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Using entanglement swapping, we construct a scheme to distribute an arbitrary multiparticle state 
to remote receivers. Only Bell states and two-qubit collective measurements are required. 
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, The superposition principle is the most novel and least understood feature of the quantum theory. Quantum 

' entanglement arises from the superposition of multiparticle states. For particles located far apart from one 
\ another, quantum entanglement gives rise to the mysterious phenomenon of non-local correlation to which there 
exists no local classical explanation P, Q) IS • With the advent of quantum information science in recent 
years, instead of remaining merely a mystery to be solved, quantum entanglement has become a valuable and 
often indispensable resource in every branch of the field. 

A bipartite state \^i,2) is entangled if it cannot be written in a product form: 

\i^i,2) = W^) Wi). (1) 
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^ \ The two-qubit Bell (or EPR) states, 

o ■ 

^; |0±2) = ^(|Oi>|i2>±|Oi)|i2)), (2) 

O; |^±2> = ^(|0i)|02)±|ii)|i2)), (3) 

are the most common entangled states employed in quantum information science. (The (g) sign will be un- 
derstood hereafter.) Usually two separated particles are entangled because they were once in contact and 
^ \ interacted with each other. However, by entanglement swapping [3,IEI3) we can entangle two remotely sep- 
^ ' arated particles which do not have a history of mutual interaction. This is a vivid demonstration of nonlocal 
correlations in the quantum theory. The idea of entanglement swapping is mathematically very simple. Con- 
sider two Bell states, say |</jf 2) ^'^'^ \'t>z a): where particles 1 and 2 have never been in contact with particles 3 
and 4 before. The product of these two states can be rewritten as 

Wt2)\^lA) = Wt:i)\^2A) + Wl:i)\4'tA) - \4'U)\vIa) - l<^r,3)l'^^4)- (4) 

Therefore if we make a Bell measurement on the pair (1,3), then depending on the outcome the (2,4) pair 
would collapse into one of the corresponding Bell states: 10^4), |02'4)i W2a)^ ^^'^ l'^2^4)- other words, 
particles 2 and 4 would become entangled even though they are far apart and have never interacted with each 
other in the past. 

In this paper, we shall use entanglement swapping to distribute an arbitrary iV-particle state to M < 
N remote parties. Distribution of quantum information is essential in quantum secret sharing (QSS) and 
other applications in quantum information science, such as quantum communication network and distributed 
quantum computation jSi]. QSS is the quantum counterpart of classical secret sharing first discussed by Blakely 
I3] and Shamir ^3] in 1979. The idea is as follows. Suppose Alice wants to send a secret message to a remote 
location, and she can send it to either of her two agents. Bob and Charlie. As a precaution against information 
leakage and misuse, it is safer for her to split the message into two pieces and send them separately to Bob and 
Charlie, such that anyone alone has absolutely no knowledge of the message. Bob and Charlie can reconstruct 
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the original secret message only if they collaborate with each other. Clearly the above consideration can be 
generalized to secret sharing by N parties. 

QSS refers to the implementation of the secret sharing task outlined above using quantum mechanical 
resources. Hillary et al. JJJ and Karlsson et al. were the first to propose QSS protocols using respectively 
three-particle Greenberger-Horne-Zeilinger (GHZ) states and two-particle Bell states. Since then, a wide 
variety of other QSS protocols have been proposed. Although the goal of most QSS protocols is to protect a 
classical secret message, the notion of QSS has also been generalized to the sharing of a secret quantum state 
[m IT^ IT^ , which is also referred to as "quantum state sharing" . 

Whether the goal is to share a classical or a quantum secret, in almost all cases, it is necessary to distribute 
a A/^-qubit entangled state among M parties, where N > M > 2. For example, in the QSS protocol of Hillery 
et al. Alice uses GHZ states to split a quantum key into two shares such that each of the two agents. Bob 
and Charlie, gets only one share. To do so, Alice must be able to safely distribute two of the particles in each 
tripartite GHZ state separately to Bob and Charlie. In the quantum state sharing protocol proposed by Cleve 
et al. |l3j . the secret message to be shared is a single qutrit state. The protocol is similar to an error-correcting 
code, in which a three-qutrit entangled state is generated from the secret qutrit. The "dealer" then distributes 
the resulting three qutrits to three different parties. More generally, in a so-called (fc, n) threshold scheme, 
the secret (quantum or classical) is divided into n shares, such that any k of those shares can be used to 
reconstruct the secret, while any set of less than k shares contains absolutely no information about the secret 
at all. So in general one needs to distribute an arbitrary entangled state to n different parties. 

Of course Alice could send the particles involved directly over quantum channels to their respective desti- 
nations. This practice is however both inefficient and unsafe. First of all, since noise is always present in any 
available channel, quantum information may get distorted; more seriously decoherence effects may even cause 
the particle to collapse. The loss of any one particle in an unknown multiparticle state due to decoherence or 
dissipation will require the whole state to be regenerated again. Hence direct distribution of the particles is not 
an efficient way to proceed. Furthermore the state to be shared is itself the carrier of information, therefore 
for security reasons, it is not safe to send them directly over long-distance quantum channels which may be 
monitored by eavesdroppers. Of course eavesdropping activities can be detected by security testing methods, 
but they inevitably involve measuring some of the particles going through the channels, which is obviously not 
acceptable if they are part of the multiparticle state being distributed. 

It is therefore more desirable to distribute the particles using quantum entanglement plus local operations 
and classical communications only. Entanglement resources are usually supplied by two-qubit Bell states or 
sometimes three-qubit GHZ states shared between the sender and the intended receivers. The advantage of 
this approach is that the required entanglement can be established and tested independent of the state to be 
distributed. Once it is securely established, quantum channels are no longer needed, and transmission noise is 
no longer a problem. 

In the following, we show how to faithfully distribute an arbitrary A'^-qubit state using entanglement swap- 
ping; our scheme generalizes a multipartite QSS protocol discussed in Ref. J^J. Schemes of distributing 
A^-qubit states by teleportation have also been proposed However, these protocols have the undesir- 

able features that the complexity of the required collective measurements increases with N. In our scheme, 
only Bell states are used and only two-qubit collective measurements are required. 

To proceed, we first show that entanglement swapping between two Bell states can be generalized to that 
between an arbitrary A^-qubit state and a Bell state. The setting is that Alice owns an arbitrary A^-qubit state 
1^1,. ...iv), and she shares a Bell state with Bob who is somewhere far away; Ahce holds qubit-/.t and Bob 

qubit-j/. From 

\^l.^...,N)^{m{0^\ + \h}{h\)\^l,...,N), {1<1<N), (5) 

we see that |^i,...,Af) can always be rewritten as 

\^i,...,n) = a|0,)|$i,...,,_i,.+i,...,jv) + 6|l^>l*'i,.....-i..+i,....Jv), (6) 

where |op -I- |6p = 1, and |$i,...,i-i,i+i,...,jv) and |'i'i,...^i_i_i+i_...^jv) are normalized states of (A^ — 1) qubits. 
Note that unless a or 6 vanishes, or |$i,...,i-i,i+i,...,iv) and \^[ ^) differ only by a phase factor, 

otherwise qubit-i is entangled with the rest of the group. 




FIG. 1: Entanglement swapping between an arbitrary 7V-qubit state and a Bell state Qubit-z/ belongs to Bob, 

and the rest to Alice; dashed (solid) straight lines indicate (maximal) entanglement, and dashed ellipse represents a 
Bell measurement. 
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(7) 



Hence a Bell measurement by Alice on the {i,fJ-) pair will entangle the remote qubit-z^ to the local group of 
{N — 1) qubits (1, i — 1, i + 1, N). This process is depicted diagrammatically in Fig. 1. 
The resulting A^-qubit state depends on the outcome of the Bell measurement: 



(1) \^t,) 

(2) l^.>> 

(3) K^) 

(4) \^-,) 



a|l.)|$i,...,^-i,^+i,...,jv> -6|0.)|$'i, 
a|l,.>|$i,...,»-i,»+i,...,jv> +6|0.>|$'i, 
a|0.)|$i^...,.-i^m,...,Jv) -6|l.>l*i„ 
fl|0.>|$i^...,.-i^.+i,...,jv)+fc|l.>l*i 



,1-1,1+1,. 
,1-1,1+1,. 



.,Nh 
.,n)i 



(8) 
(9) 
(10) 

(11) 



Comparing with Eqs. ®, we see that if Alice tells Bob which of the four Bell states she has obtained, then by a 
local unitary transformation on qubit-i/ Bob can rotate the state of the A^-qubit group (1, — z + A^) 
back to the original state |^'i,...,Ar) (with qubit-i qubit-:/). The required unitary operators are (a^crx, dx, 
az, I) respectively for the four possible outcomes listed in Eqs. It is easily seen that the information 

cost for the whole operation is one e-bit plus two c-bits (classical bits) from Alice to Bob. If qubit-i is not 
entangled with the group (1, i — 1, i + 1, A^), that is, if Eq. © can be reduced to 



1*1,.. .,iv) = (a|0.) +6|l.))|$i,... 



i-l,i+l,...,N/ , 



(12) 



then what we have done is simply the teleportation fl7| of a single qubit (a|Oj) +fo|li)) from Alice to Bob. For 
a general |\E'i,...,jv) our procedure effectively teleports the entanglement to Bob. 

Notice that the above procedure is entirely general, in the sense that it is independent of the state of the 
inactive qubits (l,...,z— l,i + l,..., A^). Therefore it can be repeated until all the qubits are distributed to their 
respective remote locations as desired. We note in passing that, if Alice leaves some of the qubits undistributed, 
then the distributed qubits form a mixed state. 

It is interesting to note that each round of the operation (Bell measurement plus unitary rotation) described 
above can be summarized by the action of an operator Uii, which interchanges the states of qubit-i and qubit-i/: 



C^..(l*i,..., 



2 — 1,2,^+1,, 



,N)\<P-J) = 1*1 



(13) 



where without loss of generality we have assumed that the measured Bell state has been rotated back to the 
singlet Bell state \4>~j}, which Alice can easily do by a local unitary transformation. The effect of Ui„ is 
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identical to that of a regular two-qubit swap gate [ig except for the fact that here the qubits involved are 
remotely separated; hence Uiu is a kind of nonlocal swap operator. The whole distribution process can be 
accomplished by simply repeating this swapping operation N times: 

N N N 

i—l i—1 i—1 

where the N qubits {vi, vn) are located at their respective destinations. 

From this perspective, it is clear that we could also use the general nonlocal swap operation in place 

of Uii^., although it would be rather inefficient to do so. It is known that the implementation of a general 
nonlocal swap operation requires at least two e-bits plus two c-bits from Alice to Bob plus another two c-bits 
from Bob to Alice [l^l20j . However in our scheme, only one e-bit and two c-bits from Alice to Bob are needed 
per swap. This difference in resources consumption is due to the fact that Ui^- is actually not an universal 
swap operator, because it cannot be used to swap two arbitrary remote qubits. Our scheme is only good for 
the special purpose of qubit distribution, where each round of swapping is analogous to the teleportation of a 
single qubit, hence relatively less resources are required. 

In summary, we have constructed a scheme to distribute an arbitrary iV-qubit state (pure or mixed) to 
M < N remote parties. The basic operation used is entanglement swapping which involves only Bell states and 
tw o-qu bit collective measurements. Our scheme is experimentally feasible with currently available technologies 
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